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Method of encrypting a data stream 



Current legislation requires the possibility of encryption when storing 
television programmes received by broadcast Television programmes, in particular digitally 
broadcasted television programmes, can be provided with copy control information as meta 
data. Options for the copy control information are among others: do not copy (recording not 

5 allowed), copy once (one recording allowed; copying recording not allowed) and copy free 
(j&ee distribution of the content allowed wilhin the personal environment of the consumer). 
And even when the copy free information is broadcasted with the television programmes, it 
may be required to encrypt any stored part of the television programme. This requirement is 
set in a further broadcast flag. 

10 This requires implementation of encryption hardware and/or software in video 

recorders. The problem is, however, that the installed base does not siq)port encryption. This 
can be solved by buying new equipment, but this is expensive. And on legacy equipment, 
legacy audiovisual material can still be reproduced. Furthermore, not all programmes 
recorded by video recorders with encryption functionality encrypt programmes when they 

1 5 record them. Besides that, the new video recorders with encryption fimctionality will be able 
to play back encrypted content Therefore, it is not always directly necessary to discard the 

legacy DVD players. 

However, as content on a DVD may be mixed, i.e. encrypted content is stored 
next to non-encrypted content, a user may try to playback encrypted content on a non- 
20 compliant DVD-player. With respect to reproduction of video data, this will result in not very 
interesting blocks on the screen. With respect to reproduction of audio data, this will result in 
noise, ticks et cetera, which can be quite loud. This is because not all audio data is encrypted; 
the first part of data packs stored on a DVD are in the clear and may comprise data which the 
DVD-player uses for synchronisation. The loud noise may damage equipment (speakers) 
25 and/or the ears of a user, especially when he or she wears headphones. 

It is an object of the invention to solve or at least alleviate this problem. 



PHNL040228EPQ 



2 23.02.2004 
To achieve this object, the invention provides in a first aspect the method according to claim 
1. 

When the ID of audio data is modified and not compliant with the DVD 
standard, a legacy player will not recognise the audio as such an will not reproduce any 
5 audio. 



The invention will be finiiher elucidated by means of Figures, wherein: 
Figure 1 shows a video recorder 100 as an embodiment of the apparatus for 
1 0 storing data according to the invention; 

Figure 2 shows a flowchart depicting an embodiment of the method for 
encrypting a data stream according to the invention; 

Figure 3 shows a data pack produced by the method depicted by the flowchart 
shown by Figure 2; and 

1 5 Figure 4 shows a DVD player as an embodiment of the apparatus for 

retrieving and rendering data according to liie invention. 



Figure 1 shows a video recorder 100 as and embodiment of the apparatus 
20 according to the invention. The video recorder 100 comprises a receiver 101, a de- 
multiplexer 102, a video processor 103 as a rendering unit, a coding circuit 1 10 as an 
embodiment of the circuit according to the invention, flie coding circuit 110 comprising a 
multiplexer 104, an encryption unit 105 and a packet identifier unit 106. The video recorder 
fijrther comprises a DVD recorder drive 107 as a storage device. 
25 The operation of Ihe video recorder 100 will described by means of 

Figure 1 and a flowchart 200 depicted in Figure 2, lowing a recording process as.an_ 
embodiment of iiie pro;sess. according to the invention. The processes of tiie flowchart 200 are 
labelled as. indicated in Table 1. 



numajcal: 



Labal of process step 
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906 


Sesrmentiiis streams 


208 


Addino: ID data to sesments 


210 


Putting: segments in packs 


212 




214 


Encrypting packs 


216 


Alter ID data of basic audio stream segments 


218 


Store stream 


220 


End procedure 



Table 1 



The recording process starts by means of a user input in a process step 200. In 
a further embodiment, the recording process starts by means of an automatically generated 
input of a programming unit conceived to programme recordings by the video recorder 100. 

5 Next, a data stream comprising data to record is received by the receiver 101 

in a process step 202. The data stream can be received by receiving a signal 150 comprising 
the data by a wireless coimection, a broadcast wired connection like cable, or a (virtual) point 
to point connection like broadband intemet; various embodiments of the receiving process 
step 202 and the receiver 101 are possible. Having received the signal 150, the data stream is 

10 extracted from the signal and provided to the de-multiplexer 102. The extracted data stream 
is in this embodiment a transport stream comprising audio and video data streams for a 
television programme. In the further course of this description as well as the claims 
accompanying this patent application, both types of data will be referred to as audiovisual 
data, even when there is only audio or video data. 

15 The de-multiplexer 102 separates the various audiovisual data streams 

comprised by the extracted programme stream to usually an elementary audiostream and an 
elementary videostream. A preferred format for these elementary streams is the MPEG-2 
format. The programme stream may also comprise a stream with data for interactive 
television applications and a stream with data for enhancing the elementary audiostream 

20 and/or the elementary videostream. In Figure 2, the de-multiplexing process step is 
comprised by the receiving process step 202. 

The elementary audiostream and the elementary videostream are provided to 
the video processor 103 for rendering the audiovisual data comprised by the elementary 
streams. For this description, rendering means that the MPEG-2 data (in case of the present 

25 embodiment) is decompressed and transformed for reproduction by a speaker 120 and a TV- 
set (not shown). 
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Besides rendering, the video recorder 100 is also capable of recording the 
received data. To this, the data received by the receiver 101 and de-multiplexed by the de- 
multiplexer 102 (both in the process step 204) is segmented in data segments in a process 
step 206. The data segments are also known as (data) packets. 
5 Subsequently, ID data is added to Hie segmmts to identify the type of data 

comprised by the segments. The ID data identiiSes the type of data comprised by the segment 
and is pre-defined to fecilitate playback of the stored data by a playback apparatus like a 
DVD (Digital Versatile Disc) player. For the DVD standard, the values of stream IDs as in 
Table 2 have been agreed The ID data is comprised by a data segment (or data packet) 
10 header. 

Table 2 also comprises information on sub stream IDs. Sub stteams ate 
comprised by a private stream comprised by the total data stream on a DVD. The sub streams 
provide further information, complementary to the basic audio and video data. Examples are 
AC-3, audio, DTS (Digital Theatre System), SDDS (Special Data Dissemination Standard), 
1 5 LPCM (Linear Pulse Code Modulation) and other. 





stieain_id 


sub_stream_id 


MPEG Audio (base) 


1100 Oxxx 


N/A 


MPEG Audio (ext) 


1101 Oxxx 


N/A 


AC-3 


1011 1101 


1000 Oxxx 


DTS 


1011 1101 


1000 Ixxx 


SDDS 


1011 1101 


1001 Oxxx 


LPCM 


1011 1101 


1010 Oxxx 



Table 2 



In a subsequent process step 210, the segments are arranged in data packs. 
Datapacte comprise data, segments of one type of stream. This implies that a data pack may 
comprise data of multiple sub streams. Optionally, datapacks comprise a padding pack when 
20 not enough dala of one streamJs available to fill the ZltBof thaagreed data pack sise. The 
packs -are:pro]ddedxvifh^a header forideatificaiion. 

Iira.subaeqiiaiit_pm0eos.. step 212^&iq ..dms^pBckB witkthe...aiiidio^gBalda£aara 



PHNL040228EPQ 



5 23.02,2004 
Process steps numbered 206 through 212 form a sub process 230 which is 
carried out by the multiplexer 104. As a person skilled in the art will appreciate, these process 
steps may also be carried out by separate components. 

After the packs have been put in one stream, they are encrypted in a process 
5 step 214. This encryption is done partly, so a playback apparatus is still able to read at least 
some data segment and data pack identification information of each pack. Preferably, the first 
128 bytes of a data pack are not encrypted. 

After the process step 214, data packs are obtained as depicted in Figure 3. 
Figure 3 shows a data pack 300, comprising a pack header 301, a data segment header 302 
10 and a payload 320. The pack header 301 comprises data for identifying the data pack, the 

data segment head^ 302 comprises an ID segment 312 identifying the type of data comprised 
by the payload 320 (as set out in Table 2). The scramble information is comprised by two bits 
in the scramble identification bits 314. 

In a subsequent process step 216, the ID data segment of data segments 
15 comprising audio data is modified. In this way, the audio packets are not recognised as such 
by a playback apparatus such as a legacy DVD player. This is done to prevent possible 
playback on a device that is not able to decrypt the packets. When a legacy DVD player, i.e. a^ 
DVD player not comprising an embodiment of the circuit of decryption according to the 
invention, would recognise an encrypted packet as comprising audio data, the legacy DVD 
20 player would try to playback the encrypted data. Usually, this will result in a lot of noise that 
could damage audio equipment such a speakers and, when played back over heac^hones, 
harm the ears of a user wearing the headphones. 

When no audio data is recognised because the proper streamjid is not found, 
no audio will be played back and only decrypted video will be played back. This is not very 
25 interesting to watch, but does not harm the legacy DVD-player. 

Inventors propose modification of the stream Jd and sub_stream_id values as 



shown in Table 3. as a person skUled in the art will appreciate, modifications of this scheme 
are possible; Table 3 merely provides an embodiment 





oiigmal 


modified 


streamjd 


sub_stream_id 


streamjid 


sub_stream_id 


MPEG Audio 
(base) 


1100 Oxxx 


N/A 


1100 Ixxx 


N/A 


MPEG Audio 


1101 Oxxx 


N/A 


1101 Ixxx 


N/A 
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(ext) 










AC-3 


1011 1101 


1000 Oxxx 


1011 1101 


1100 Oxxx 


DTS 


1011 1101 


1000 Ixxx 


1011 1101 


1100 Ixxx 


SDDS 


1011 1101 


1001 Oxxx 


1011 1101 


1101 Oxxx 


LPCM 


1011 1101 


1010 Oxxx 


1011 1101 


UllOxxx 



Table 3 

For the private stream, also the streamjd can be modified instead of the 



sub_stream_id. Li Table 4, only stream_ids are modified, not flie sub_stream_ids. Video, 
audio and sub__picture streams are now all hidden. An additional advantage of not including 
5 the sub_stream_ids is that it is not necessary to parse the stream to find the location of the 
stream ID, as it is always stored in the 1 8* byte of the pack. 





Streamjid 


Modified 

■aUwdlXl lU 


Comment 


MPEG-audio base 
stream 


1100 Oxxx 


1100 Ixxx 


Data mapped to valid MPEG 
audio streamnumber, not used 
by DVD (DVD streamnumer 
+8) 


MEG-Audio ext 
stream 


1101 Oxxx 


1101 Ixxx 


Data mapped to valid MPEG 
Audio streamnumber, not used 
by DVD (DVD stream number 
+ 8) 


Video stream 


1110 0000 


11101000 


Data mapped to imused video 
streamnumber 15 


Private stream- 1 
(used for AC-3, 
DTS, sub-picture, 

LECM etc.) 


1011 1101 


1110 1111 





Table...4 

Ha^g.modified;i2ieJDjdsLta.of .1iie,.audi^^ stroamof Uie date:to store^ Iha 
eaiGisrptBd dat2.pacts3a-s:i3tojCsd by tTte Wm 3BCiQjEsi3i:.diive 107 ia a prcaas^sisu 21C. 
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Figure 4 shows a DVD player 400 as an embodiment of the apparatus for 
rendering and retrieving audiovisual data according to the invention. The DVD player 400 
comprises a DVD drive 401 as a storage device, a decryptitMi unit 402, a de-multiplexer 403 

and a video processor 404. 

5 When playback of encrypted data stored on a DVD is requested, data is 

retrieved from the DVD by the DVD drive 401 . Next, the packs are decrypted by the 
decryption unit 402. The de-multiplexer 403 is adapted to recognise modified ID data. This 
means that it is able to recognise data for the MPEG audio stream, even though the streamjd 
is different from what has been defined by the DVD standard. The decryption unit 402 and 

10 the de-multiplexer form a circuit 41 0 as and embodiment of the dicuit for encrypting a data 

stream according to the invention. 

The de-multiplexer forms elementary streams from the packets, delivering it to 
a video processor 404 for rendering to provide a signal that can be reproduced on a speaker 
420 or a TV-set (not shown). The video processor can be embodied as a MPEG decoder. 
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CLAIMS: 



1 . Method of encrypting a data stream comprising at least one stream of 
audiovisual data, comprising steps of: 

(a) segmenting the stream of audiovisual data in data segments; 

(b) providing the data segments with ID data in an ID segment, the ID data being 

5 different from ID data being pre-determined to identify the type of data in the stream 

of audiovisual data; and 

(c) partly encrypting the data segments, leaving the ID segment imencrypted. 

2. Method according to claim 1, wherein the method further comprises the st^ 
10 of creating data packs, each data pack comprising at least one data segment and wherein in 

the step of partly encrypting the data segments, the ED segment of at least on data segment is 
unencrypted- 

b 

'■ ^ I 

1 

3 , Method according to claim 1 , wherein the data stream comprises multiple 
1 5 streams of different types of audiovisual data and data segments of at least one stream of 

audiovisual data are encrypted 

4, Method according to claim 3, wherein data segments of at least on stream of 
audiovisual data is provided with ID segments comprising ID data being different ftom ED 

20 data being pre-determined to identify the type of data in the stream of audiovisual data. 

5, Method according to claim 3, wherein the multiple streams of audiovisual data . 
are provided simultaneously and the method further comprising the step of multiplexing the 
segments comprising data of the multiple streams of audiovisual data to a further data stream. 

25 

6. Method according to claim 1 , wherein the data segments are provided with 
further ID data in the ID segment, the further ID data being pre-determined to identify the 
fype of data in the stream of audiovisual data and the further ID data being in a fiirther step 
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replaced by the ID data being different from ID data being pre-determined to identify the 
type of data in the stream of audiovisual data. 



7. Method of stoiing a data stream comprising at least one stream of audiovisual 

data, comprising the step of receiving the data stream, the method as claimed in claim 1 and 
the step of storing the segmented and encrypted data on a storage medium 



8- Circuit for encrypting a data stream comprising at least one stream of 

audiovisual data, comprising: 

(a) a segmenting unit for segmenting the stream of audiovisual data in data segments; 

(b) providing the data segment with ID data in an ID segment, the ID data being different 
from ID data being pre-determined to identify the type of data in the stream of 
audiovisual data; and 

(c) an encryption unit for parfly encrypting the data segments, leaving the ID segment 
unencrypted. 



9. Circuit according to claim 8, further comprising a packing unit for creating 

data paclcs, each data pack comprising at least one data segment; and wherein in the step of 
partly encrypting the data segments, the ID segment of at least on data segment is 
unencrypted. 



1 0. Apparatus for storing data, comprising: 

(a) a receiver fijr receiving data; 

(b) the circuit according to claim 8; and 

(c) a storage device for storing the encrypted data on a storage medium.. 

1 1 . Method of decrypting audiovisual data encryptedusing to the-meliiod as 
claimed in claim 1 , comprising the. steps of: 

(a) decrypting Aepijrtiy encrypted data.segments; 

(b) resoinising that the data_C£nried by Iha ID. ssgmenticdifilient fiora;ID.ds±a.bsino- 
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1 2. Method of retrieving an rendering data stored using the method as claimed in 

claim 7, comprising the step of retrieving data stored on the storage medium, the method as 
claimed in claim 1 1 and the step of rendering the decrypted stream of audiovisual data, 

13^ Circuit for decrypting audiovisual data encrypted by the circuit as claimed in 

claim 7, comprising: 

(a) A decryption unit for decrypting the partly encrypted data segments; 

(b) An identification unit for recognising that the data carried by the ID segment is 
different firom ID data being pre-detemiined to identify the type of data in the stream 
of audiovisual data and recognising the actual type of data comprised by the data 
segments; and 

(c) A streaming unit for fomung a stream of audiovisual data from the data segments. 

14, Apparatus for rendering and retrieving audiovisual data, comprising: 
a storage device for retrieving data from a storage medium; 

the circuit according to claim 12; and 

a circuit for rendering the decrypted stream of audiovisual data. 

15. Con^uter programme product comprising computer readable instruction for ; 
programming a processing unit for executing the method according to claim 1 . 

1 6. Data carrier carrying the computer programme product as claimed in claim 1 . 

17, Programmed computer enabled to execute the method according to claim 1 . 

1 g_ Computer programme product comprising computer readable instruction for 

programming a processing unit for executing the method according to claim 1 1 . 

19^ Data carrier carrying the computer programme product as claimed in claim 1 1 - 



20 



Programmed computer enabled to execute the method according to claim 1 1 
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